Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BABB84CDD7111EFB634287A762E951A.roa
File: 9BABB84CDD7111EFB634287A762E951A.roa (raw, json)
Hash identifier: 7falzMd4mBmmtTAV+c2JF/Lkx6reEqFX+0ayMzlCkVQ=
Subject key identifier: 49:88:1E:81:E5:2A:9E:EF:BE:1D:3C:23:EC:2A:DE:05:D3:B4:29:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BABB84CDD7111EFB634287A762E951A.roa
Signing time: Tue 28 Jan 2025 12:15:49 +0000
ROA not before: Tue 28 Jan 2025 12:15:43 +0000
ROA not after: Wed 12 Feb 2025 12:15:43 +0000
asID: 5065
IP address blocks: 154.94.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85254 (0x14d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:15:43 2025 GMT
Not After : Feb 12 12:15:43 2025 GMT
Subject: CN=6798ca75-6cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:71:8b:7e:8c:0d:93:49:76:50:47:22:37:
0d:fb:28:d1:b5:f7:c8:72:e2:bc:99:ee:5f:90:df:
29:bd:03:e2:85:1b:2d:a4:5b:a7:bf:b9:c1:c6:0f:
6d:70:d5:3a:4f:99:c3:c9:f2:36:2e:6a:0d:a2:c6:
f3:49:0b:81:c6:e8:e8:d4:0c:6c:58:1b:69:73:d7:
cd:77:34:15:d4:53:92:60:13:14:da:f6:d2:1e:41:
84:6f:f6:41:f0:84:eb:9f:95:56:2e:21:f4:5c:52:
f6:ec:94:78:b4:fa:c4:9e:bc:12:6b:52:cd:47:33:
24:29:c7:70:29:34:a2:a3:fc:ff:ee:cc:57:9b:8f:
ec:a5:95:a2:22:2f:42:42:6c:25:b3:06:1d:54:9a:
17:54:7f:f7:0c:37:ff:5a:49:5e:06:98:fe:ff:65:
2e:21:ac:28:77:22:8a:ba:7d:0c:bc:a1:f8:5d:b1:
61:0c:bd:29:f9:bd:67:e3:79:24:f7:b8:e5:02:90:
c9:d1:9a:f1:14:da:3a:a5:5f:50:0f:ee:74:18:21:
b9:21:f6:d5:f7:cd:0c:e7:50:1d:29:20:84:f6:a9:
17:a9:56:2a:87:52:84:73:6b:76:de:6c:81:e7:a3:
06:f0:28:72:88:27:9e:fd:d9:f8:9b:88:ba:9b:3c:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:1E:81:E5:2A:9E:EF:BE:1D:3C:23:EC:2A:DE:05:D3:B4:29:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BABB84CDD7111EFB634287A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b7:a5:09:fd:e4:0a:d4:8c:14:5d:bb:33:b0:51:50:f7:53:
65:07:99:48:43:ec:4a:31:14:95:9c:86:22:d7:3f:66:9c:70:
97:b6:95:10:8b:4a:1c:0a:21:1e:af:6b:5e:a2:a0:f9:c7:3d:
95:1e:98:88:fe:4d:d3:62:b0:59:f7:d8:63:14:7c:09:01:b8:
95:4b:31:56:a1:de:b9:35:c9:4c:dd:38:39:c1:42:63:ce:84:
50:22:89:49:c1:9f:ac:4d:1d:23:0a:27:4f:26:bb:17:d4:dc:
a2:b0:76:fc:e0:d3:ec:63:97:ca:5f:8b:fc:27:31:a2:5f:9d:
64:0a:b1:3b:a5:4a:3a:0f:2c:04:b7:19:13:94:ad:05:35:90:
b6:07:7e:5e:1c:25:1f:65:a5:01:d8:0a:e5:b9:ad:ef:51:a2:
4b:d6:03:fb:50:9a:b7:5b:e7:46:d3:2d:10:3d:c2:63:39:58:
ec:41:a7:12:b2:5b:a0:5a:0d:10:a5:b7:dc:d3:77:81:1c:6c:
b5:ed:37:1c:cd:c9:5c:09:d0:87:f5:a2:cc:84:86:51:dc:3b:
72:0f:b7:66:93:1c:9a:ab:d1:8b:9c:df:78:46:1c:d6:7f:7e:
67:18:85:c0:69:25:87:36:d7:79:5e:f9:c0:84:2a:42:c2:41:
eb:be:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:19 2025 by rpki-client